]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
rgw: always check if token is expired 4765/head
authorAnton Aksola <anton.aksola@nebula.fi>
Fri, 10 Apr 2015 10:25:21 +0000 (13:25 +0300)
committerNathan Cutler <ncutler@suse.com>
Tue, 26 May 2015 13:26:45 +0000 (15:26 +0200)
commitd4ef5566e6b1b2ac73925660a1d627dbb6cc7632
tree9c2b86cca3fd7bcbcfb3f39b77e47612d72ce415
parent68211f695941ee128eb9a7fd0d80b615c0ded6cf
rgw: always check if token is expired

Fixes: #11367
Currently token expiration is only checked by the token cache. With PKI
tokens no expiration check is done after decoding the token. This causes
PKI tokens to be valid indefinitely. UUID tokens are validated by
keystone after cache miss so they are not affected by this bug.

This commit adds explicit token expiration check to
RGWSwift::validate_keystone_token()

Signed-off-by: Anton Aksola <anton.aksola@nebula.fi>
Reported-by: Riku Lehto <riku.lehto@nexetic.com>
(cherry picked from commit 2df069390ea3bbcfbab5022750e89f51d197cc11)
src/rgw/rgw_swift.cc